IMPORTANT: Python Litellm compromised
I’m releasing this immediately as it’s important to people who use the Python programming language. This seems to be true and at the bottom of this message is the link to the Blog about this for the LiteLLM maintainers.
Summary: This litellm package can be a dependency of many other packages, you may not know you are installing it unless you use pip and watch the output carefully.
LiteLLM HAS BEEN COMPROMISED, DO NOT UPDATE. We just discovered that LiteLLM pypi release 1.82.8. It has been compromised, it contains litellm_init.pth with base64 encoded instructions to send all the credentials it can find to remote server + self-replicate. link below.
Explanations
Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.
Someone just poisoned the Python package that manages AI API keys for NASA, Netflix, Stripe, and NVIDIA.. 97 million downloads a month. and a simple pip install was enough to steal everything on your machine. The attacker picked the one package whose entire job is holding every AI credential in the organization in one place. OpenAI keys, Anthropic keys, Google keys, Amazon keys… all routed through one proxy. All compromised at once. The poisoned version was published straight to PyPI.. no code on GitHub.. no release tag.. no review. Just a file that Python runs automatically on startup. You didn’t need to import it. You didn’t need to call it. The malware fired the second the package existed on your machine.
Here is the message from the LiteLLM maintainers. This shows the exact dates and times where people could have been affected. Please read the whole post. https://docs.litellm.ai/blog/security-update-march-2026